Google Git
Sign in
chromium / v8 / v8 / refs/heads/lkgr
commit64f7dacb77b12911fa9d8dcbede9b400e979f3a2[log] [tgz]
authorFrank Tang <ftang@chromium.org>Sat Nov 01 00:42:57 2025
committerV8 LUCI CQ <v8-scoped@luci-project-accounts.iam.gserviceaccount.com>Mon Nov 03 22:40:13 2025
tree701d0b66d3c4a595ad65d64c2b0d9e88892193b3
parentb7bb1c90df093c564c88b8f9a15aaaf8cdf971ca [diff]
[sandbox] Fix Sandbox Bypass: in icu_77::UnicodeString::doAppend

Also fix copy/paste problem found by gemini in src/objects/js-segments.h

Bug: 454734141
Change-Id: Id16f0d5c38f6da07928e1f6473afad4430215bf2
Cq-Include-Trybots: luci.v8.try:v8_linux64_asan_sandbox_testing_compile_rel,v8_linux64_sandbox_testing_compile_rel,v8_linux64_sandbox_testing_rel
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7092382
Reviewed-by: Igor Sheludko <ishell@chromium.org>
Commit-Queue: Frank Tang <ftang@chromium.org>
Cr-Commit-Position: refs/heads/main@{#103476}
5 files changed
tree: 701d0b66d3c4a595ad65d64c2b0d9e88892193b3
  1. .github/
  2. bazel/
  3. build_overrides/
  4. custom_deps/
  5. docs/
  6. gni/
  7. include/
  8. infra/
  9. samples/
  10. src/
  11. test/
  12. testing/
  13. third_party/
  14. tools/
  15. .bazelrc
  16. .clang-format
  17. .clang-tidy
  18. .editorconfig
  19. .flake8
  20. .git-blame-ignore-revs
  21. .gitattributes
  22. .gitignore
  23. .gn
  24. .mailmap
  25. .style.yapf
  26. .vpython3
  27. .ycm_extra_conf.py
  28. AUTHORS
  29. BUILD.bazel
  30. BUILD.gn
  31. CODE_OF_CONDUCT.md
  32. codereview.settings
  33. COMMON_OWNERS
  34. DEPS
  35. DIR_METADATA
  36. ENG_REVIEW_OWNERS
  37. GEMINI.md
  38. INFRA_OWNERS
  39. INTL_OWNERS
  40. LICENSE
  41. LICENSE.fdlibm
  42. LICENSE.strongtalk
  43. LICENSE.v8
  44. LOONG_OWNERS
  45. MIPS_OWNERS
  46. MODULE.bazel
  47. OWNERS
  48. PPC_OWNERS
  49. PRESUBMIT.py
  50. pyrightconfig.json
  51. README.md
  52. RISCV_OWNERS
  53. S390_OWNERS
  54. WATCHLISTS
README.md

V8 JavaScript Engine

V8 is Google's open source JavaScript engine.

V8 implements ECMAScript as specified in ECMA-262.

V8 is written in C++ and is used in Google Chrome, the open source browser from Google.

V8 can run standalone, or can be embedded into any C++ application.

V8 Project page: https://v8.dev/docs

Getting the Code

Checkout depot tools, and run

    fetch v8

This will checkout V8 into the directory v8 and fetch all of its dependencies. To stay up to date, run

    git pull origin
    gclient sync

For fetching all branches, add the following into your remote configuration in .git/config:

    fetch = +refs/branch-heads/*:refs/remotes/branch-heads/*
    fetch = +refs/tags/*:refs/tags/*

Contributing

Please follow the instructions mentioned at v8.dev/docs/contribute.